Dren Hima

The biggest losses of 2023-2026 broke no cryptography. Bybit’s $1.5bn drain ran through a sound multisig and clean contracts; the attacker only changed what the signers saw. Four mechanisms recur and braid together: poisoned software supply chains, tampered signing interfaces, laundered authority via approvals and off-chain signatures, and privileged paths hidden in contracts, proxies and [&...